moved config above docroot... you know, basic security and all